> It's really not. Ever had your ISP inject shit into your pages? This. And all the other skulduggery that MITM attacks enable. I'm kind of surprised that non

> It's really not. Ever had your ISP inject shit into your pages? This. And all the other skulduggery that MITM attacks enable. I'm kind of surprised that none of the powers-that-be ever pushed for an HTTPS mode that merely signs requests and responses rather than encrypting them, in an effort to undermine encryption advocates.